@seams/wallet 0.8.0 → 0.9.1

package/dist/esm/core/signingEngine/walletCustody/registrationCeremony.js

@@ -1,460 +0,0 @@
-import { base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
-import { sha256Bytes } from "../../../shared-ts/src/utils/digests.js";
-import { issueWalletRecoveryCodes, zeroizeIssuedWalletRecoveryCodes } from "../../../shared-ts/src/wallet-recovery/recoveryCodeIssuance.js";
-import "../../../shared-ts/src/wallet-recovery/recoveryCodes.js";
-import { deriveRecoveryCodeLocatorV1FromBytes } from "../../../shared-ts/src/wallet-recovery/recoveryCodeLocator.js";
-import { walletCustodyCommitPayloadWithRecoveryBackupAcknowledgement } from "../../../shared-ts/src/passkey-custody/ceremonyCommitPayload.js";
-import "../../../shared-ts/src/passkey-custody/index.js";
-import { runWalletCustodyKeySetCeremony } from "./ceremonyDriver.js";
-//#region src/core/signingEngine/walletCustody/registrationCeremony.ts
-async function establishNearEd25519CustodyV1(input) {
-	let issued = issueWalletRecoveryCodes();
-	let activationSessionId = null;
-	try {
-		const payload = await runWalletCustodyKeySetCeremony({
-			runStep: input.runStep,
-			custody: {
-				origin: "establish",
-				walletId: input.walletId,
-				factorJson: input.factorJson,
-				factorSecret: input.factorSecret,
-				recoveryCodesJson: JSON.stringify(issued.codeBytes.map((bytes) => ({ codeBytesB64u: base64UrlEncode(bytes) })))
-			},
-			keySetRun: {
-				keySet: "near_ed25519_v1",
-				protocolInputsJson: JSON.stringify({
-					yaoAdmission: input.yaoAdmission,
-					yaoApplication: input.yaoApplication,
-					clientParticipantId: input.participantIds[0],
-					signingWorkerParticipantId: input.participantIds[1],
-					...input.continuityRegisteredPublicKeyB64u === void 0 ? {} : { continuityRegisteredPublicKeyB64u: input.continuityRegisteredPublicKeyB64u }
-				}),
-				nearEd25519SigningKeyId: input.nearEd25519SigningKeyId,
-				runRouterRound: async (yaoExecuteRequestJson) => {
-					const resultJson = await input.runRouterRound(yaoExecuteRequestJson);
-					activationSessionId = activationSessionIdFromResult(resultJson);
-					return resultJson;
-				}
-			}
-		});
-		if (!activationSessionId) throw new Error("the NEAR custody ceremony produced no activation session id");
-		const commitPayload = await walletCustodyCommitPayloadWithRecoveryCodeLocators(payload, issued);
-		return {
-			recoveryCodes: issued.codes,
-			activationReference: {
-				kind: "router_ab_ed25519_yao_activation_reference_v1",
-				lifecycle_id: input.registrationCeremonyId,
-				session_id: activationSessionId
-			},
-			commitPayload: walletCustodyCommitPayloadForWire(commitPayload),
-			localMaterial: payload.ed25519LocalMaterialB64u && payload.ed25519LocalMaterialNonceB64u && payload.ed25519ApplicationBindingDigestB64u ? {
-				b64u: payload.ed25519LocalMaterialB64u,
-				nonceB64u: payload.ed25519LocalMaterialNonceB64u,
-				applicationBindingDigestB64u: payload.ed25519ApplicationBindingDigestB64u
-			} : null
-		};
-	} finally {
-		if (issued) zeroizeIssuedWalletRecoveryCodes(issued);
-		issued = null;
-	}
-}
-function joinCustodyJsonFromEstablishedCommitPayload(payload) {
-	const established = payload.establishedCustody;
-	if (!established) throw new Error("wallet custody join requires an established envelope");
-	let envelopeBinding;
-	try {
-		envelopeBinding = JSON.parse(established.envelopeBindingJson);
-	} catch {
-		throw new Error("wallet custody envelope binding is not JSON");
-	}
-	if (typeof envelopeBinding !== "object" || envelopeBinding === null || Array.isArray(envelopeBinding)) throw new Error("wallet custody envelope binding must be an object");
-	return JSON.stringify({
-		envelopeBinding,
-		nonceB64u: established.envelopeNonceB64u,
-		sealedCustodySecretB64u: established.sealedCustodySecretB64u,
-		aadHashB64u: established.envelopeAadHashB64u,
-		ciphertextDigestB64u: established.envelopeCiphertextDigestB64u
-	});
-}
-async function establishEvmFamilyCustodyV1(input) {
-	let issued = issueWalletRecoveryCodes();
-	let admittedCommitPayload = null;
-	let clientBootstrap = null;
-	try {
-		const issuedForCeremony = issued;
-		if (!issuedForCeremony) throw new Error("recovery codes were not issued");
-		const payload = await runWalletCustodyKeySetCeremony({
-			runStep: input.runStep,
-			custody: {
-				origin: "establish",
-				walletId: input.walletId,
-				factorJson: input.factorJson,
-				factorSecret: input.factorSecret,
-				recoveryCodesJson: JSON.stringify(issued.codeBytes.map((bytes) => ({ codeBytesB64u: base64UrlEncode(bytes) })))
-			},
-			keySetRun: {
-				keySet: "evm_family_ecdsa_v1",
-				protocolInputsJson: JSON.stringify({ applicationBindingDigestB64u: input.applicationBindingDigestB64u }),
-				evmFamilySigningKeySlotId: input.evmFamilySigningKeySlotId,
-				beforeRelayerRound: input.confirmRecoveryCodesBackedUp.bind(void 0, issued.codes),
-				runRelayerRound: async (bootstrap) => {
-					const preActivationCommitPayload = walletCustodyCommitPayloadWithRecoveryBackupAcknowledgement(await walletCustodyCommitPayloadWithRecoveryCodeLocators(bootstrap.preActivationCommitPayload, issuedForCeremony));
-					admittedCommitPayload = preActivationCommitPayload;
-					clientBootstrap = {
-						contextBinding32B64u: bootstrap.contextBinding32B64u,
-						derivationClientSharePublicKey33B64u: bootstrap.clientSharePublicKey33B64u,
-						clientShareRetryCounter: bootstrap.clientShareRetryCounter,
-						participantId: 1
-					};
-					return await input.runRelayerRound({
-						...bootstrap,
-						preActivationCommitPayload
-					});
-				}
-			}
-		});
-		if (!admittedCommitPayload || !clientBootstrap) throw new Error("the EVM custody ceremony reached no activation round");
-		if (!payload.ecdsaReadyStateBlobB64u || !payload.ecdsaPublicFacts) throw new Error("the EVM custody ceremony produced no local signing material");
-		return {
-			recoveryCodes: issued.codes,
-			commitPayload: admittedCommitPayload,
-			clientBootstrap,
-			localMaterial: {
-				readyStateBlobB64u: payload.ecdsaReadyStateBlobB64u,
-				publicFacts: payload.ecdsaPublicFacts
-			}
-		};
-	} finally {
-		if (issued) zeroizeIssuedWalletRecoveryCodes(issued);
-		issued = null;
-	}
-}
-async function joinEvmFamilyCustodyV1(input) {
-	let admittedCommitPayload = null;
-	let clientBootstrap = null;
-	const payload = await runWalletCustodyKeySetCeremony({
-		runStep: input.runStep,
-		custody: {
-			origin: "join",
-			custodyJson: input.custodyJson,
-			factorSecret: input.factorSecret
-		},
-		keySetRun: {
-			keySet: "evm_family_ecdsa_v1",
-			protocolInputsJson: JSON.stringify({ applicationBindingDigestB64u: input.applicationBindingDigestB64u }),
-			evmFamilySigningKeySlotId: input.evmFamilySigningKeySlotId,
-			beforeRelayerRound: async () => void 0,
-			runRelayerRound: async (bootstrap) => {
-				admittedCommitPayload = bootstrap.preActivationCommitPayload;
-				clientBootstrap = {
-					contextBinding32B64u: bootstrap.contextBinding32B64u,
-					derivationClientSharePublicKey33B64u: bootstrap.clientSharePublicKey33B64u,
-					clientShareRetryCounter: bootstrap.clientShareRetryCounter,
-					participantId: 1
-				};
-				return await input.runRelayerRound(bootstrap);
-			}
-		}
-	});
-	if (!admittedCommitPayload || !clientBootstrap) throw new Error("the EVM custody join reached no activation round");
-	if (payload.establishedCustody) throw new Error("an EVM custody join must not establish a second wallet seed");
-	if (!payload.ecdsaReadyStateBlobB64u || !payload.ecdsaPublicFacts) throw new Error("the EVM custody join produced no local signing material");
-	return {
-		commitPayload: admittedCommitPayload,
-		clientBootstrap,
-		localMaterial: {
-			readyStateBlobB64u: payload.ecdsaReadyStateBlobB64u,
-			publicFacts: payload.ecdsaPublicFacts
-		}
-	};
-}
-function recoveryCeremonyCustody(input) {
-	switch (input.factorReplacement.kind) {
-		case "preserve_existing": return {
-			origin: "recover",
-			custodyJson: input.custodyJson,
-			recoveryCode: input.recoveryCode
-		};
-		case "reseal_replacement_factor": return {
-			origin: "recover_and_reseal",
-			custodyJson: input.custodyJson,
-			recoveryCode: input.recoveryCode,
-			replacementFactorJson: input.factorReplacement.factorJson,
-			replacementFactorSecret: input.factorReplacement.factorSecret
-		};
-		default: return assertNeverRecoveryFactorReplacement(input.factorReplacement);
-	}
-}
-function assertNeverRecoveryFactorReplacement(value) {
-	throw new Error(`unsupported recovery factor replacement: ${String(value)}`);
-}
-async function recoverEvmFamilyCustodyV1(input) {
-	if (await computeWalletCustodyEvmFamilyKeyManifestDigestB64u({
-		walletId: input.walletId,
-		evmFamilySigningKeySlotId: input.evmFamilySigningKeySlotId,
-		clientRootPublicKey33B64u: input.registeredClientRootPublicKey33B64u
-	}) !== input.recordedKeyManifestDigestB64u) throw new Error("EVM recovery manifest digest does not match the registered identity");
-	const payload = await runWalletCustodyKeySetCeremony({
-		runStep: input.runStep,
-		custody: recoveryCeremonyCustody(input),
-		keySetRun: {
-			keySet: "evm_family_ecdsa_v1",
-			protocolInputsJson: JSON.stringify({ applicationBindingDigestB64u: input.applicationBindingDigestB64u }),
-			evmFamilySigningKeySlotId: input.evmFamilySigningKeySlotId,
-			beforeRelayerRound: async () => void 0,
-			runRelayerRound: input.resolveRelayerPublicIdentity
-		},
-		recordedKeyManifestDigestB64u: input.recordedKeyManifestDigestB64u
-	});
-	if (!payload.ecdsaReadyStateBlobB64u || !payload.ecdsaPublicFacts) throw new Error("the EVM recovery produced no local signing material");
-	if (payload.clientRootPublicKey33B64u !== input.registeredClientRootPublicKey33B64u) throw new Error("the EVM recovery changed the registered client root public key");
-	return {
-		readyStateBlobB64u: payload.ecdsaReadyStateBlobB64u,
-		publicFacts: payload.ecdsaPublicFacts,
-		recoveryReplacementEnvelope: payload.recoveryReplacementEnvelope ?? null
-	};
-}
-async function rejoinEvmFamilyCustodyV1(input) {
-	const recordedKeyManifestDigestB64u = await computeWalletCustodyEvmFamilyKeyManifestDigestB64u({
-		walletId: input.walletId,
-		evmFamilySigningKeySlotId: input.evmFamilySigningKeySlotId,
-		clientRootPublicKey33B64u: input.registeredClientRootPublicKey33B64u
-	});
-	const payload = await runWalletCustodyKeySetCeremony({
-		runStep: input.runStep,
-		custody: {
-			origin: "join",
-			custodyJson: input.custodyJson,
-			factorSecret: input.factorSecret
-		},
-		keySetRun: {
-			keySet: "evm_family_ecdsa_v1",
-			protocolInputsJson: JSON.stringify({ applicationBindingDigestB64u: input.applicationBindingDigestB64u }),
-			evmFamilySigningKeySlotId: input.evmFamilySigningKeySlotId,
-			beforeRelayerRound: async () => void 0,
-			runRelayerRound: async () => input.relayerPublicIdentityJson
-		},
-		recordedKeyManifestDigestB64u
-	});
-	if (payload.establishedCustody) throw new Error("an EVM cold unlock must not establish custody");
-	if (!payload.ecdsaReadyStateBlobB64u || !payload.ecdsaPublicFacts) throw new Error("the EVM cold unlock produced no local signing material");
-	return {
-		readyStateBlobB64u: payload.ecdsaReadyStateBlobB64u,
-		publicFacts: payload.ecdsaPublicFacts
-	};
-}
-function appendU32Be(output, value) {
-	output.push(value >>> 24 & 255, value >>> 16 & 255, value >>> 8 & 255, value & 255);
-}
-function appendManifestField(output, label, value) {
-	const labelBytes = new TextEncoder().encode(label);
-	appendU32Be(output, labelBytes.length);
-	output.push(...labelBytes);
-	appendU32Be(output, value.length);
-	output.push(...value);
-}
-async function computeWalletCustodyEvmFamilyKeyManifestDigestB64u(input) {
-	const walletId = String(input.walletId || "").trim();
-	const slotId = String(input.evmFamilySigningKeySlotId || "").trim();
-	const clientRootPublicKey = base64UrlDecode(input.clientRootPublicKey33B64u);
-	if (!walletId || !slotId || clientRootPublicKey.length !== 33) throw new Error("EVM custody continuity identity is invalid");
-	const fields = [];
-	appendManifestField(fields, "context", new TextEncoder().encode("seams/wallet-custody/key-set-manifest/evm-family-ecdsa/v1"));
-	appendManifestField(fields, "walletId", new TextEncoder().encode(walletId));
-	appendManifestField(fields, "evmFamilySigningKeySlotId", new TextEncoder().encode(slotId));
-	appendManifestField(fields, "clientRootPublicKey33", clientRootPublicKey);
-	return base64UrlEncode(await sha256Bytes(Uint8Array.from(fields)));
-}
-async function computeWalletCustodyNearEd25519KeyManifestDigestB64u(input) {
-	const walletId = String(input.walletId || "").trim();
-	const signingKeyId = String(input.nearEd25519SigningKeyId || "").trim();
-	const registeredPublicKey = base64UrlDecode(input.registeredPublicKeyB64u);
-	if (!walletId || !signingKeyId || registeredPublicKey.length !== 32) throw new Error("NEAR custody continuity identity is invalid");
-	const fields = [];
-	appendManifestField(fields, "context", new TextEncoder().encode("seams/wallet-custody/key-set-manifest/near-ed25519/v1"));
-	appendManifestField(fields, "walletId", new TextEncoder().encode(walletId));
-	appendManifestField(fields, "nearEd25519SigningKeyId", new TextEncoder().encode(signingKeyId));
-	appendManifestField(fields, "registeredPublicKey", registeredPublicKey);
-	return base64UrlEncode(await sha256Bytes(Uint8Array.from(fields)));
-}
-/**
-* Strips everything the server must never receive.
-*
-* The Gateway drops these too, so this is the second of two independent
-* guards — but only this one keeps them off the wire at all. The ECDSA
-* ready-state blob is the sharper case of the two: it is not self-encrypted,
-* and the client's signing share falls out of its bytes with no key, so
-* sending it would hand one share of a 2-of-2 key to the holder of the other.
-* The Ed25519 cache is a same-device record the server has no use for.
-*/
-function walletCustodyCommitPayloadForWire(payload) {
-	const { ed25519LocalMaterialB64u: _cache, ed25519LocalMaterialNonceB64u: _cacheNonce, ed25519ApplicationBindingDigestB64u: _cacheBinding, ecdsaReadyStateBlobB64u: _readyState, recoveryReplacementEnvelope: _recoveryReplacement, ...wire } = payload;
-	return wire;
-}
-async function walletCustodyCommitPayloadWithRecoveryCodeLocators(payload, issued) {
-	const established = payload.establishedCustody;
-	if (!established) return payload;
-	if (established.recoveryManifestKekWraps.length !== issued.codeBytes.length) throw new Error("recovery code and wrap counts do not match");
-	const recoveryCodeLocators = await Promise.all(issued.codeBytes.map(async (codeBytes, index) => {
-		const wrap = established.recoveryManifestKekWraps[index];
-		if (!wrap) throw new Error("recovery code and wrap counts do not match");
-		return {
-			locatorB64u: await deriveRecoveryCodeLocatorV1FromBytes(codeBytes),
-			recoveryKeyId: wrap.recoveryKeyId
-		};
-	}));
-	if (new Set(recoveryCodeLocators.map((locator) => locator.locatorB64u)).size !== recoveryCodeLocators.length) throw new Error("recovery code locators must be unique");
-	return {
-		...payload,
-		establishedCustody: {
-			...established,
-			recoveryCodeLocators
-		}
-	};
-}
-/**
-* Reads the activation session id out of the Router's result.
-*
-* Parsed rather than accepted as a separate argument so it can only be the id
-* of the round this run actually performed — a caller-supplied one could name
-* another ceremony's activation, which the finalize leg would then burn.
-*/
-function activationSessionIdFromResult(resultJson) {
-	let parsed;
-	try {
-		parsed = JSON.parse(resultJson);
-	} catch {
-		throw new Error("the Router activation result is not JSON");
-	}
-	const sessionId = (parsed?.binding)?.session_id;
-	if (!Array.isArray(sessionId) || sessionId.length === 0) throw new Error("the Router activation result carries no session id");
-	return sessionId.map((byte) => {
-		if (typeof byte !== "number" || !Number.isInteger(byte) || byte < 0 || byte > 255) throw new Error("the Router activation session id is not a byte array");
-		return byte;
-	});
-}
-async function recoverNearEd25519CustodyV1(input) {
-	if (await computeWalletCustodyNearEd25519KeyManifestDigestB64u({
-		walletId: input.walletId,
-		nearEd25519SigningKeyId: input.nearEd25519SigningKeyId,
-		registeredPublicKeyB64u: input.registeredPublicKeyB64u
-	}) !== input.recordedKeyManifestDigestB64u) throw new Error("NEAR recovery manifest digest does not match the registered identity");
-	let activationResultJson = null;
-	let activationReceipt = null;
-	const payload = await runWalletCustodyKeySetCeremony({
-		runStep: input.runStep,
-		custody: recoveryCeremonyCustody(input),
-		keySetRun: {
-			keySet: "near_ed25519_v1",
-			protocolInputsJson: JSON.stringify({
-				yaoAdmission: input.yaoAdmission,
-				yaoApplication: input.yaoApplication,
-				clientParticipantId: input.participantIds[0],
-				signingWorkerParticipantId: input.participantIds[1],
-				continuityRegisteredPublicKeyB64u: input.registeredPublicKeyB64u
-			}),
-			nearEd25519SigningKeyId: input.nearEd25519SigningKeyId,
-			runRouterRound: async (executeRequestJson) => {
-				activationResultJson = await input.runRouterRound(executeRequestJson);
-				return activationResultJson;
-			},
-			afterRouterRoundCompleted: async (protocolResultJson) => {
-				activationReceipt = await input.activateRouterRecovery(protocolResultJson);
-			}
-		},
-		recordedKeyManifestDigestB64u: input.recordedKeyManifestDigestB64u
-	});
-	if (!payload.ed25519LocalMaterialB64u || !payload.ed25519LocalMaterialNonceB64u) throw new Error("the NEAR recovery sealed no local signing material");
-	if (!payload.ed25519ApplicationBindingDigestB64u) throw new Error("the NEAR recovery omitted its application binding digest");
-	if (!activationResultJson || !activationReceipt) throw new Error("the NEAR recovery produced no Router activation");
-	return {
-		localMaterial: {
-			b64u: payload.ed25519LocalMaterialB64u,
-			nonceB64u: payload.ed25519LocalMaterialNonceB64u,
-			applicationBindingDigestB64u: payload.ed25519ApplicationBindingDigestB64u
-		},
-		activationResultJson,
-		activationReceipt,
-		recoveryReplacementEnvelope: payload.recoveryReplacementEnvelope ?? null
-	};
-}
-/**
-* Adds the wallet's first NEAR key set to custody established by EVM.
-*
-* This is a join without a continuity key because registration is creating
-* the NEAR key set for the first time. The envelope and recovery set already
-* exist, so this run writes only the NEAR manifest and local continuity cache.
-*/
-async function joinNearEd25519CustodyV1(input) {
-	return await runJoiningNearEd25519Custody(input, input.registrationCeremonyId, void 0, "registration join");
-}
-async function rejoinNearEd25519CustodyV1(input) {
-	const registeredPublicKeyB64u = String(input.registeredPublicKeyB64u || "").trim();
-	if (!registeredPublicKeyB64u) throw new Error("a cold unlock must name the key set it reproduces");
-	let activationResultJson = null;
-	let activationReceipt = null;
-	const rejoined = await runJoiningNearEd25519Custody({
-		...input,
-		preparation: { kind: "fresh" }
-	}, input.recoveryLifecycleId, registeredPublicKeyB64u, "cold unlock", async (protocolResultJson) => {
-		activationResultJson = protocolResultJson;
-		activationReceipt = await input.activateRouterRecovery(protocolResultJson);
-	});
-	if (!activationResultJson || !activationReceipt) throw new Error("the NEAR cold unlock produced no Router recovery activation");
-	return {
-		...rejoined,
-		activationResultJson,
-		activationReceipt
-	};
-}
-async function runJoiningNearEd25519Custody(input, lifecycleId, continuityRegisteredPublicKeyB64u, operation, afterRouterRoundCompleted) {
-	let activationSessionId = null;
-	const payload = await runWalletCustodyKeySetCeremony({
-		runStep: input.runStep,
-		custody: {
-			origin: "join",
-			custodyJson: input.custodyJson,
-			factorSecret: input.factorSecret
-		},
-		keySetRun: {
-			keySet: "near_ed25519_v1",
-			...input.preparation.kind === "checkpoint" ? { checkpointJson: input.preparation.checkpointJson } : {
-				protocolInputsJson: JSON.stringify({
-					yaoAdmission: input.yaoAdmission,
-					yaoApplication: input.yaoApplication,
-					clientParticipantId: input.participantIds[0],
-					signingWorkerParticipantId: input.participantIds[1],
-					...continuityRegisteredPublicKeyB64u ? { continuityRegisteredPublicKeyB64u } : {}
-				}),
-				beforeRouterRound: input.beforeRouterRound
-			},
-			nearEd25519SigningKeyId: input.nearEd25519SigningKeyId,
-			runRouterRound: async (yaoExecuteRequestJson) => {
-				const resultJson = await input.runRouterRound(yaoExecuteRequestJson);
-				activationSessionId = activationSessionIdFromResult(resultJson);
-				return resultJson;
-			},
-			...afterRouterRoundCompleted ? { afterRouterRoundCompleted } : {}
-		}
-	});
-	if (!activationSessionId) throw new Error(`the NEAR ${operation} produced no activation session id`);
-	if (payload.establishedCustody) throw new Error(`a NEAR ${operation} must not establish custody`);
-	if (!payload.ed25519LocalMaterialB64u || !payload.ed25519LocalMaterialNonceB64u) throw new Error(`the NEAR ${operation} sealed no local material`);
-	return {
-		commitPayload: walletCustodyCommitPayloadForWire(payload),
-		activationReference: {
-			kind: "router_ab_ed25519_yao_activation_reference_v1",
-			lifecycle_id: lifecycleId,
-			session_id: activationSessionId
-		},
-		localMaterial: {
-			b64u: payload.ed25519LocalMaterialB64u,
-			nonceB64u: payload.ed25519LocalMaterialNonceB64u,
-			applicationBindingDigestB64u: String(payload.ed25519ApplicationBindingDigestB64u || "")
-		}
-	};
-}
-//#endregion
-export { establishEvmFamilyCustodyV1, establishNearEd25519CustodyV1, joinCustodyJsonFromEstablishedCommitPayload, joinEvmFamilyCustodyV1, joinNearEd25519CustodyV1, recoverEvmFamilyCustodyV1, recoverNearEd25519CustodyV1, rejoinEvmFamilyCustodyV1, rejoinNearEd25519CustodyV1, walletCustodyCommitPayloadForWire };
-
-//# sourceMappingURL=registrationCeremony.js.map